home

wlsetup-web.exe

Windows Essentials

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Essentials

Description:
Windows Essentials Installer

Version:
16.4.3522.0110

MD5:
0ccd4b451964d10698694bb18a12134a

SHA-1:
f7abfe5489347774bf1ac05c55609590a3a129b3

SHA-256:
e6206adb52b30ce5a5b79150a327740f0288079ee72d5de3d521ad2c5906eccb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/26/2024 1:33:31 AM UTC  (today)

File size:
1.2 MB (1,239,744 bytes)

Product version:
16.4.3522.0110

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
wlsetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\wlsetup-web.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/25/2013 6:33:39 AM

Valid to:
4/25/2014 6:33:39 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
1/11/2014 5:24:13 AM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:uPz7O4ILdA9KHjStCd8Xxpqo01fgBOV2oEb5uxmtc:UfIIKCBBpN0eO2oEoH

Entry address:
0x36596

Entry point:
E8, D8, 43, 00, 00, E9, 81, FE, FF, FF, CC, CC, CC, CC, CC, 6A, 0C, 68, 18, C4, 4D, 00, E8, 1F, 46, 00, 00, 83, 65, E4, 00, 8B, 5D, 0C, 8B, C3, 8B, 7D, 10, 0F, AF, C7, 8B, 75, 08, 03, F0, 89, 75, 08, 83, 65, FC, 00, 4F, 89, 7D, 10, 78, 0C, 2B, F3, 89, 75, 08, 8B, CE, FF, 55, 14, EB, EE, 33, C0, 40, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 14, 00, 00, 00, E8, 20, 46, 00, 00, C2, 10, 00, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, 45, E4, 85, C0, 75, 0B, FF, 75, 14, 57, 53, 56, E8, 06, 00, 00, 00, C3, CC, CC...
 
[+]

Entropy:
6.5625

Code size:
925 KB (947,200 bytes)

The file wlsetup-web.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1483401522&Signature=hUU2DwRVPq7NhfEPFAJdtkh0uLP2GrFJgZOzS9t5zILpjwMHuTzDQY2fem0bhnhZ~dUn0obO9Ekn9ftrJLO6dJGPg87GpGPYESE40Rk93FFk9uWQl9lcIsqXaOxhaeULAtoIoWDXz8nE8bKhBXtqHCvdsOoyAn8YuzxA~QLMcGU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1478198346&Signature=emQfdyx4fpTKn9WTnzvdc~GMYcphRVCpkuG7iF-lWJ67iFCCj~2lfapb5ogfkfQmifEYnGotPnqsVpjA5Z53oxLPEGVGUN1MOKz2kPUZ~Cs~lqt3vd7w8zzs3QV4rkpphbVEsn6iRW9d0DiPMyD~66ZCTjW4wFz4PhlLmTI1Fbc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1480146024&Signature=RQqrSdiGlOnaPl9vVzBko7UEneNBrcfJ1gMEOfOxf3zUt-iEh3gq9eGiQnS~eWyKxkqgx8v04ciuqvoFgZGSKTVqzFvphVCeEgKT5F3B2W9fPrAic8nK8poOu~Is8GZpfCFmoRlsiO6wgi7D-QLpgfLHNqtnJKeBMy~JsGFEyfA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1438951122&Signature=V11Z5ml30Vcgt3LHgIpZWT61SxkjOVrkQAv3z34f4YmJCNOg--pcx-zSYOMCtRTXnyyNWnI2X2QV2NAucC~XQ0HbPbJm~ekukf0Rf2s-soV5PEBzCWLqjqiW-j2h9d9gTPiau7ajIUccw86UEsbQz6N5r4CdWw8q-ylq-R~DXKY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1450319686&Signature=HYIK1-~zPVysRNg8w5oWy0nx1bNFiTX-YAGbzlkm84wC3Taiu00WmEDhPcoq7h2qLMVmuzIw2AOC411M0vMBLq7yaRU4b1OrlKljmGaPdcMJBXXpE4J5yLoy~LYlXgeDJPahXWs-qBZ2aT48ltf00fGzy3WYv6tfPkwPtmo19CM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1473634964&Signature=RPKCp71Dmtnnkf0AX8vxjBm2~uEvDnRQEWu6PPIM8-d8nc~7VXuAzdkbZ-bqtdtxhuB9BPpsSjwrx3N~krwQKYbflB4wiL9weLmTOsNvam49EhMmlb0gr8YaWy1a28Svvi9JrcZ0lKwrHyGGn8oDe92B1xXWb6RgbGGB1M03ZNA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1475855047&Signature=ABD5HnCETPf46vw5WRvH8VrsT53dDuMzTiSXT6y7GWcLNAx~YxI8QfbzVg68IN0~5gtbGQAbFSDGsmcOuGCpPjjVt8rpkYrPcXIKvCCqYh~p-bpuPwQ4yKhCA6MlePQNZEemy3zNiOLCNOmtbfJbog2Dmf7-JJ45Poxq~WMHdH0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1479337782&Signature=QMWEciwl8eoSC8rI8dhyxtcRttlhkMEG4-oGiNtV-5YOxJhzbLB71eI4vZ4udc93E45Erdf4NWOvLtAPpjrN~sDHi36Elp2iYiTWAXhL5zcTtb4d0VefopleXq7oUg1HkqMDDSlnWIFLDvIvfYOmXCQw~efBehdB~~eVkvjh8bY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://filehippo.com/zh/download/file/.../

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1458835601&Signature=I2s47~82U7XU0BUULywKeo1Rg2tcNc1MS5obQrpuiOBxWa3zFtiINVEUEZRwuZQIcRHsKlfteP8ANE0N-xPsB5VkBa~DpLcmILoNecKv3GtEdlEWbAUN3eqKv3~CZEYPXj573NRBCF~vR2U7M9VCoWxIMVHX33fTEgTGz6MX~og_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1485689257&Signature=Ik1tD3u~7VOsPu3yf29FaWa1Af-~XR7EjIMEZ7bmHxoDpFzcMjWcUg80wotGOpDAJLCv-k84cL0Mv2hihcG0V6AulET4A~8-wmmui06Hv9xEccMjvbbP6mJfOhTdz~2K9VlXmcyOe-Sp7KXz1jlki51YPOLKLBT1SpVN9VSwrfM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1479185151&Signature=F6CuunXEwdMa8Ycepa0uc4rFUioq9hyOEEci9IKmxXf7H2juJkU9DYq-JBAL2e87EOzyGWdT~I8N3LEz4-1eG9H5lKTpfDHbnn5eatIv9Mq-5b~5~9t5RYIwuxIr~Q9gHVvTbv-0ej80-dsiSA7LxHSW19mkPb48WOnTFtVULSM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1485698510&Signature=TQu89St25JvxdNpJugJXCfPvSGbFsdXblxQgggvAPDhCGFiJjlFROWFjY9rAgSv7yudgKgQtsnHuhIb3lHnB2TKiNZ9zfW481N7qDMDdyKQX-BnVnYpcnmbSS2pwBnduCdOGH~CwP-GS1kyFeiXqB9Ib8TvMgKpEqW-TIgfIoGI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1438395676&Signature=eYXLf5tAoV7vQnIlpcOoaF5-vkbTK6jAO-m8Yj-cRoRsKotWsnCrNBCTtnploR8N4dRXL6Wmz0nLU1hsV2KnDq9lEXCnactZ-z~xj-DiPpoaDrF3-95ZYyP2cvAzmXvRCAcYebVrinsQCl5oYEzirS-uX~HWJwcJ8-JnCCOej5g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1453006753&Signature=FvzugGwgvb2inuF-wkfu10Oe4dDyGJXmWOV6Be1mMlwlLEhBGyFjouuPiEpd5Zo4R0DBcJsE~BpNM6DkMiBOonSZz-~Fv6eQLkPb2qwNPj-tiVnLviA2YmcyvAUhzgfcynaDYvaLX2iimXJxcUPpUz3foQM0dg1HRTGizzedc1A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1478656426&Signature=ElASUjZ5yuH2fGNb9k27mGKe6yd3ikFsqnN7I~bd4Cw3ingMKdvapfs0XkQ4Y2qpOT-yHxfF5gLKoy4irR6OeHqlIidj-7mkPYcFglC9Bg7qD1-6vUWgXBXblUlO1ImuD7paLqMkuVsWRvKKFrFcGKIasGdM8v7AvsxAOEDgb5U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1462423415&Signature=IyuoLAuhbpyprMjvwSN9qL18j82w1K6gRpAplmmKxoAaZIkG60UsbCKYDSDb2zrnpOnyy3gEFNlXkMqii-pcMO6zB26-TVccOWBdH5~Sr~xqAkqZCIbl-uoDSA1EvUyXLsKBaV2Tw2E5yeAVZMPo1CONkSEovgs84Kj8Y9LWdgo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1476500719&Signature=GAr2iEeBec~VTOQbn3zaJvTXC0TLAth5tI4QLLyqLquvv-MUHCwW5sUfeM2YMHr0BfdcrqB1RQSTgva1~u8WBiiJDP~59HjgOg4y~80ebOx1dteILA7JyIXJh25s2Mls4RFWh5gBVIqYLx4OAy-5Paq4DueXIOkyLsh7VJqNx6Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1441297233&Signature=U5TgAV3m12K0-kNhAvJxqbp30e5TKYDb1ifO0Yf7fWRkQNhyHm1FsGFHxoaY8TMAK6QrWwdSNQKUBcmE0XqXlciJjHe7VFMKA~9zQ8v79FKgP0YhG2JrVZOBQmYpbI6Q~wfLmmv5K6kr0pMUqLhc3sRNgUDZ2OdC9QpM2dFIaZY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1472704030&Signature=UFhi~DDheX~DK-GdPRFSurwofU35n0uihtIZ3cu4xsQ1MysJDOwz~Nfx4VpNggHyyalaVBrmcs0pViyoYKsmiH4XIGv-O7JcEK6A7JYitb3yAsEbbsgxtndteKGozvd4KXreH~-dmOPosPKEVE6whj8WIx1BWO-DU6kCHAu0TEw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1446892447&Signature=QgjDN5eaVkaOIDMkQqPSf2xfXHDIrw89KAi4zR8PnHJ2TrLkiP6HAVQQGadvcyGe8tdnhU0xih7mIknuwQ4tRu99sgjnI~Ozy-7IWCwq5voCYkIyZPbbBWU3TyjCzTk5m4z8E48YOG3pEux2URUujurmdtv8-FK6pDRaK-obwBo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1482330452&Signature=WG7xFCO8VaTdGzH6QRgDaVi9wyneh3h-eMtQm6fqREl1dRuodRnyufl5CSolL0q618Tc1tcG6LZo3z9NLcvGDrQce3X8kWAegGF3BfQuhECQrBzNcBqVrevSnhftwa16l6nfl1sZa8hBsZVi3E-F3B9tNuuOl65ho13iudyKCyk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1478581602&Signature=fTdmBfkXumEnkJZJS6xRxWC~gTOrhIgOn48lxCP54yLNlBGgm6ocIYHvWSlC2L~WYRHCuOVuYBhIpOC2qV3Yr3p~XaxmOw9iwSxfm0BWKXLN0qGJ8cQQebBr3P8QLK-hltfQbf6qSvP-Ek-pIKLQSOyWM91kdHxTv3iq2SdgHLU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1449003941&Signature=dlLPzlCP-NTnrVLithZKPAzGwlYOd7dns4-BQ677hAGWk6C99IfTBR7AwsBPJ~iyKWsMU7Dz3Kd4~BU9iXYj0HX9awgW0RWfLbL~XhRmQ1yYh60wlYzoEVXuL5vHr~HhojV5t8U9BddVAh-tlBO4ZaGFvqYM2RJNapF3Q-jaRNQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1477107897&Signature=CCRnoW2z~0a9Yc~S0vB96X3mhOI4b2BZ6Zs~TAIV6FOLrbvit9eBoSSl8vmslNCILgYmQ0U3tXV3KLVIZrGvlC5tie747lymthXbeeFHFXYDDVSFfrarnxZHcIWnMhbVfERrNmaQ4dhSr1~pIyYocK5k7LqpMS8O9KdY32rFdnk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1479385838&Signature=YvDWHB3nuGweo-4LvAnnVKWEn-DPkV~6g6i6M6kJtFvudXExo9JJWEhjpIhSC~s1LOgmaNi9Wr5ea55G1fkNx0XNKvGFrVbunGzOp11Tnp2rlspdmisxJBZYjD3R5BziZMZsaB1uYQv6qQcw~lXn121gN0JXiuaFEyeecoFOUR4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1477095827&Signature=EyzO~UUaRJwjBGIRtmQG2ByJ~D2GujSn2tvzukm1B5mnaRCukFGxZJ5ulZLaLyoJKsdm1WRIXZLhpyEg-CiPEJz7Pv4bvgYZF9Wvgq8KBMQbEiHY7h0EFAXfpJ~B189KUr8NpGb0vDTVmo1Uh6BNZFl1oY9ZGsC-Y81QwmXpiC0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1478025817&Signature=D~0ilcg~njYob0o31nLNCMhbzSRNg3K44WQSGxU2DBx-T8nn~kUkWxWqtx60aF~jLooqt7BRbwmSkWca9QC86jYYpsOGibtZ8VSs6FVz3luK4w~kDSbziC1OLY~zGjZqWw8Iu8wgmbH1m6YRC8aahTH94-HcFsuk0JgN6e~inKc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/f7a/bfe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=57075&instance=softonic_en&type=PROGRAM&Expires=1476515083&Signature=feYeRwdCXBN0IoZAg9PdJ9SXNgidC~v-LE7wVIH1oelaP7QmJfSOxg-EiTkGt86Q5cXRPD3P0NjoRQMPqDc3nBFtaKG2ftfA3oqYHm32SCR9U7y5JP4gatjh~mqhuv2541aBeAnPotxfFORmRoe~~XSDAZn1K~dMS0R5bMSYgxA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

Latest 30 of 197 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.